Alex Pearce, who runs a fruit and vegetable wholesale operation in London, noticed the defrost indicator lit on two refrigeration units and temperature panels reading 150 °C. After suspecting a cyber intrusion, he disconnected the internet cable feeding the units. The same anomaly was reported that day by retailers in Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands and Sweden, where some freezers rose to 50 °C, creating a fire risk.
The refrigeration incidents were part of a spate of high-profile breaches. On 30 October the world’s largest cryptocurrency exchange, Binance, lost roughly $6.3 bn in a record-breaking theft, and on 1 November hackers accessed Ukraine’s emergency alert system to broadcast a false nuclear strike warning to Kyiv residents. These events occurred within days of each other, amplifying concerns about coordinated cyber activity.
Britain’s National Cyber Security Centre warned that the continent is in the ‘foothills’ of a new hacking landscape, citing both geopolitical tensions and artificial-intelligence tools as drivers. The agency predicts AI-powered malware could target UK power stations, airports and hospitals by 2028, assisting attackers with reconnaissance, vulnerability identification and code generation. However, its operations director noted that the fridge exploit relied on publicly known default passwords rather than sophisticated AI techniques.
OpenAI’s ChatGPT helped uncover a flaw in PHP, a language that underpins much of the web, prompting temporary takedowns of sites as a precaution. Since Anthropic released its Mythos model in April, the rate at which major firms identify software flaws has risen eight-fold, though the volume of successful breaches has not kept pace. Sophos reported no major client incidents from the PHP bug but observed a surge in exploitation attempts.
The refrigeration attacks targeted the operating systems supplied by firms such as Denmark’s Danfoss, whose older controllers no longer receive security patches. Danfoss said most affected units were obsolete and that it had long advised customers to install updates or replace the software. The NCSC highlighted that ‘end-of-life’ products, which lack ongoing bug fixes, present an easy entry point for attackers, a problem echoed by operators like US-based Copeland whose 2018 monitoring system now requires upgrading.
Analysts link the fridge incidents to Russian tactics, while the Binance theft is attributed to North Korea, underscoring the state-backed dimension of recent cyber activity. Finland, sharing a long border with Russia, has seen cyber incidents rise from about 13 000 in 2022 to nearly 21 000 this year, including compromises of government phones and a defence ministry website. In response, the UK launched its ‘Be Ready’ campaign urging households to stock essential supplies for cyber or weather emergencies, and officials stress that manufacturers must build more secure IoT products.